General

  • Target

    fa4bfc38d2e6aa8a12d8d92e30977dafe1af080a5329efab36e7bccbb0ea1f68

  • Size

    484KB

  • MD5

    0a1c799c467df419be65be8b2a244800

  • SHA1

    8d9db62582a46da6443923c016d1d9e9c902c763

  • SHA256

    fa4bfc38d2e6aa8a12d8d92e30977dafe1af080a5329efab36e7bccbb0ea1f68

  • SHA512

    3d1b53e31a35601f25cb140f1c1717b02425a03ca13a45b7e8a1fd9bd2bf1384669ffb95849e44950e7d00a0b940a86afdbd4eb824e1225458d9145508a29b11

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcORMtaoK8OL8wiWAoEI:mxjlVJnQiGP/evc2gT1Wco

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • fa4bfc38d2e6aa8a12d8d92e30977dafe1af080a5329efab36e7bccbb0ea1f68
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections